- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What does "./splunk stop" do?

nick405060
Motivator
08-09-2019
01:34 PM
My indexer takes a good 5+ minutes to stop, so I've been pkill -f
'ing it for the last year and a half. What does ./splunk stop
do, how is a straight process kill different, and what am I risking?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
08-09-2019
02:50 PM
Don't kill
Splunk. The splunk stop
command tells Splunk to shut down gracefully. It waits for outstanding searches to complete before stopping. If you pull the rug out from under splunkd you risk corrupting your data in the event a lookup file is being written or a bucket is being updated.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
